WinRAR CVE-2025-8088: ADS Path Traversal Exploited by RomCom
Fixed since July 2025 but still heavily exploited, and WinRAR does not update itself, so hunt down every copy at 7.12 or older and update it today.
Must act: Anyone running WinRAR, the Windows RAR/UnRAR tools, or software that bundles an old UnRAR.dll on Windows, especially if users open RAR attachments from email.
Can relax: Linux/Unix RAR builds and RAR for Android users, and Windows fleets already verified at WinRAR 7.13 or later.
- Inventory WinRAR versions on every Windows endpoint (Help > About, or file version of WinRAR.exe in Program Files) and update anything at 7.12 or older to the current release.
- Find third-party products that ship UnRAR.dll and apply their vendor updates.
- Block or quarantine RAR attachments from external senders at the mail gateway where business need allows.